sc-lang-csharp

Identify C#/.NET security vulnerabilities with CWE references and remediation guidance.

7|Updated Apr 9, 2026
One-click install
npx skills add https://github.com/fatihkan/badi --skill sc-lang-csharp-fatihkan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sc-lang-csharp
Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-lang-csharp
Command: npx skills add https://github.com/fatihkan/badi --skill sc-lang-csharp-fatihkan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

C#/.NET projects face security vulnerabilities that are easy to miss across code, configuration, and framework usage.

Core Features & Use Cases

  • C#/.NET vulnerability pattern coverage: Detects common categories such as BinaryFormatter deserialization, ASP.NET misconfigurations, Entity Framework raw SQL injection, and SignalR authorization issues.
  • Automated reference-based checks: Consults the included csharp-security-checklist.md to surface CWE references and structured findings.
  • Use Case: A security engineer scans a .NET solution to surface RCE risks from deserialization or unsafe EF queries and outputs a remediation-focused report.

Quick Start

Run the sc-lang-csharp skill against a repository to generate a vulnerability report using the built-in checklist.

Frequently Asked Questions about sc-lang-csharp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my C# code for security vulnerabilities?

To scan C# code for security vulnerabilities, run this Skill against your repository. It analyzes source code, binaries, and configurations to detect anti-patterns and outputs a structured report with CWE references and remediation guidance.

What types of .NET security vulnerabilities can be detected through code pattern analysis?

Code pattern analysis detects .NET security vulnerabilities like BinaryFormatter deserialization risks, ASP.NET misconfigurations, Entity Framework raw SQL injection, and SignalR authorization issues by referencing a built-in security checklist.

Does this security scanner work with ASP.NET Core and Blazor projects?

Yes, this security scanner works with ASP.NET Core, Blazor, and related .NET technologies. It applies reference-based checks to identify framework-specific anti-patterns across your project's source and configuration files.

How do I find unsafe Entity Framework queries and SignalR authorization issues in my .NET solution?

To find unsafe Entity Framework queries and SignalR authorization issues, scan your .NET solution. The analysis surfaces these specific risks and generates a remediation-focused report based on a comprehensive C# security checklist.

What is the best way to check for BinaryFormatter deserialization risks in C#?

The best way to check for BinaryFormatter deserialization risks is to scan your C# project for vulnerable code patterns. The tool consults an included checklist to surface these RCE risks and provides actionable remediation steps.

Why does my .NET static analysis report CWE references for ASP.NET misconfigurations?

Your .NET static analysis report includes CWE references for ASP.NET misconfigurations because the scanner maps detected anti-patterns to standard CWE identifiers using a built-in csharp-security-checklist, ensuring structured and actionable findings.